High severity7.8NVD Advisory· Published Apr 29, 2026· Updated May 19, 2026

CVE-2026-41220

Description

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183.

Affected products

Acronis/Acronis Cyber Protect Cloud Agentllm-fuzzy
Range: < 42183
Acronis/DeviceLock DLP (Windows)llm-fuzzy
Range: < 9.0.93212

Patches

Vulnerability mechanics

References

security-advisory.acronis.com/advisories/SEC-10296nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000